# cve.now: Star7th

The newest entries naming Star7th as an affected vendor (up to 200), of 37 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-119661](https://cve.now/CVE-2026-119661.md): ShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries (CVSS 2.3)
- [CVE-2026-86644](https://cve.now/CVE-2026-86644.md): star7th showdoc API Page Save Endpoint editormd.js cross site scripting (CVSS 5.1)
- [CVE-2026-6982](https://cve.now/CVE-2026-6982.md): star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection (CVSS 5.3)
- [CVE-2022-1034](https://cve.now/CVE-2022-1034.md): There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc (CVSS 9.1)
- [CVE-2022-0964](https://cve.now/CVE-2022-0964.md): Stored XSS viva .webmv file upload in star7th/showdoc (CVSS 8.0)
- [CVE-2022-0965](https://cve.now/CVE-2022-0965.md): Stored XSS viva .ofd file upload in star7th/showdoc (CVSS 9.0)
- [CVE-2022-0966](https://cve.now/CVE-2022-0966.md): Stored XSS via File Upload in star7th/showdoc in star7th/showdoc (CVSS 6.4)
- [CVE-2022-0967](https://cve.now/CVE-2022-0967.md): Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc (CVSS 6.9)
- [CVE-2022-0942](https://cve.now/CVE-2022-0942.md): Stored XSS due to Unrestricted File Upload in star7th/showdoc (CVSS 9.4)
- [CVE-2022-0957](https://cve.now/CVE-2022-0957.md): Stored XSS via File Upload in star7th/showdoc (CVSS 7.6)
- [CVE-2022-0956](https://cve.now/CVE-2022-0956.md): Stored XSS via File Upload in star7th/showdoc (CVSS 7.1)
- [CVE-2022-0951](https://cve.now/CVE-2022-0951.md): File Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc (CVSS 8.2)
- [CVE-2022-0950](https://cve.now/CVE-2022-0950.md): Unrestricted Upload of File with Dangerous Type in star7th/showdoc (CVSS 6.5)
- [CVE-2022-0945](https://cve.now/CVE-2022-0945.md): Stored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc (CVSS 9.0)
- [CVE-2022-0962](https://cve.now/CVE-2022-0962.md): Stored XSS viva .webma file upload in star7th/showdoc (CVSS 9.0)
- [CVE-2022-0960](https://cve.now/CVE-2022-0960.md): Stored XSS viva .properties file upload in star7th/showdoc (CVSS 9.0)
- [CVE-2022-0946](https://cve.now/CVE-2022-0946.md): Stored XSS viva cshtm file upload in star7th/showdoc (CVSS 9.0)
- [CVE-2022-0941](https://cve.now/CVE-2022-0941.md): Stored XSS due to Unrestricted File Upload in star7th/showdoc (CVSS 7.3)
- [CVE-2022-0940](https://cve.now/CVE-2022-0940.md): Stored XSS due to Unrestricted File Upload in star7th/showdoc (CVSS 6.3)
- [CVE-2022-0938](https://cve.now/CVE-2022-0938.md): Stored XSS via file upload in star7th/showdoc (CVSS 7.1)
- [CVE-2022-0937](https://cve.now/CVE-2022-0937.md): Stored xss in showdoc through file upload in star7th/showdoc (CVSS 6.3)
- [CVE-2022-0880](https://cve.now/CVE-2022-0880.md): Cross-site Scripting (XSS) - Stored in star7th/showdoc (CVSS 7.6)
- [CVE-2022-0409](https://cve.now/CVE-2022-0409.md): Unrestricted Upload of File with Dangerous Type in star7th/showdoc (CVSS 7.2)
- [CVE-2022-0362](https://cve.now/CVE-2022-0362.md): SQL Injection in star7th/showdoc (CVSS 6.7)
- [CVE-2021-4172](https://cve.now/CVE-2021-4172.md): Cross-site Scripting (XSS) - Stored in star7th/showdoc (CVSS 6.5)
- [CVE-2022-0079](https://cve.now/CVE-2022-0079.md): Generation of Error Message Containing Sensitive Information in star7th/showdoc (CVSS 5.3)
- [CVE-2021-4168](https://cve.now/CVE-2021-4168.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 6.3)
- [CVE-2021-4000](https://cve.now/CVE-2021-4000.md): Open Redirect in star7th/showdoc (CVSS 6.5)
- [CVE-2021-3989](https://cve.now/CVE-2021-3989.md): Open Redirect in star7th/showdoc (CVSS 6.5)
- [CVE-2021-3990](https://cve.now/CVE-2021-3990.md): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc (CVSS 6.5)
- [CVE-2021-3993](https://cve.now/CVE-2021-3993.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 4.3)
- [CVE-2021-4017](https://cve.now/CVE-2021-4017.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 7.3)
- [CVE-2021-3683](https://cve.now/CVE-2021-3683.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 5.4)
- [CVE-2021-3775](https://cve.now/CVE-2021-3775.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 4.3)
- [CVE-2021-3776](https://cve.now/CVE-2021-3776.md): Cross-Site Request Forgery (CSRF) in star7th/showdoc (CVSS 4.3)
- [CVE-2021-3678](https://cve.now/CVE-2021-3678.md): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdoc (CVSS 7.5)
- [CVE-2021-3680](https://cve.now/CVE-2021-3680.md): Missing Cryptographic Step in star7th/showdoc (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/star7th
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.